4f686bb6eb16e4d693194fb0259d04fb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4f686bb6eb16e4d693194fb0259d04fb
Size

154KB
MD5

4f686bb6eb16e4d693194fb0259d04fb
SHA1

11e869bebe0be760390644055206ebbbac67bf50
SHA256

4b54cac333f650f9a17153c3c9b16e166f51ec0f6d87b4364a4d3f631a943eca
SHA512

770fd2272a6bcac91d54e4d0e09f12e6954aff05b8be9dd2a0ef665c882f6e8cfcf056936a0a7332cf1e68a09b1ce8e7c77554b790dd285b1b25d81a16baa848
SSDEEP

3072:n+8RVlTROfFzwMJYoIV6erhRY/KWEO7MPqq9KBJvPFQd1a4l1BiVScqK:n+8RVOdzLJ46+7NPqvvtnuOVS5K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4f686bb6eb16e4d693194fb0259d04fb

Files

4f686bb6eb16e4d693194fb0259d04fb
.exe windows:4 windows x86 arch:x86

8356ce8f530444f68f825c21d4ee3d6a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CLSIDFromProgID

comctl32

ImageList_SetIconSize

wininet

InternetGetConnectedState

Sections

CODE
Size: 144KB - Virtual size: 416KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE